Collaborate Disseminate
In this post we take a quick glance at some changes made to the Sundown exploit kit. The landing page has been tweaked and uses various obfuscation techniques. Sundown is used in some smaller campaigns and in this particular case dropped a downloader f… Continue reading New-looking Sundown EK drops Smoke Loader, Kronos banker
For this PUP Friday post, we’re going to look into PUPs that we can simply classify as “Downloaders”. We have sampled a program called the Internet Download Manager, which is capable of downloading other files we detect as PUP and connects to sites lea… Continue reading PUP Friday: Let’s talk generic
Last Friday, I wrote about a set of 6 PUP apps by Nikoff Security. This week, there have been some new developments in the story, some good news and some bad news.Categories: PUPs
Threat analysisTags: AppleMac App StoreNikoff SecurityPUPPUPs(Read more… Continue reading PUP Friday: Nikoff Security redux
A new piece of Mac malware, dubbed Komplex, has been discovered by Palo Alto Networks. This malware provides a backdoor into the system, like most other recent Mac malware. Where it gets most interesting, though, isn’t in its capabilities, but in the c… Continue reading Komplex Mac backdoor answers old questions
My attention was drawn a few weeks ago to a group of 6 apps in the Mac App Store, all made by someone named Nicholas Ebner. Part of what drew my attention was the name of one of the apps: Adware WebMedic Pro, suspiciously similar to the name of my old … Continue reading PUP Friday: Nikoff Security
MPlayerX has been around for over 2 years. With it’s adware installer, adware, analysis avoidance behavior, and other PUPs calling it a PUP is a no-brainer.Categories: PUPs
Threat analysisTags: adwareIronCoremalwareMalwarebytesMPlayerXPUPVSearch(Read … Continue reading PUP Friday: MPlayerX
In this article, we take a look at a couple important takeaways from 2 recent hacks on Transmission. Categories: Mac
Threat analysisTags: AppleKeRangerKeydnapmacmalwareransomwaretorrent(Read more…) Continue reading Transmission hijacked again to spread malware
Recently we got access to several elements of the espionage toolkit that has been captured attacking Vietnamese institutions. During the operation, the malware was used to dox 400,000 members of Vietnam Airlines.Categories: Malware
Threat analysisTags… Continue reading Unpacking the spyware disguised as antivirus
We have all seen the current popularity and craze with PokemonGo, it’s no surprise cyber-criminals would plan on using this to their advantage and imitate the game with malicious substitutions. Categories: Malware
Threat analysisTags: malwarepokemonpo… Continue reading PokemonGo Ransomware comes with some clever tricks
On July 29, we published a blog titled “PUP Friday: Cleaning up with 5 star awards”, taking a look at a registry cleaner called RegCleanPro made by Systweak. We detect the file in question as a PUP, and covered it as part of our regular PUP Friday seri… Continue reading Systweak Redux: our response